You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Brahma Reddy Battula (JIRA)" <ji...@apache.org> on 2018/02/13 14:00:00 UTC

[jira] [Commented] (HADOOP-14799) Update nimbus-jose-jwt to 4.41.1

    [ https://issues.apache.org/jira/browse/HADOOP-14799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362353#comment-16362353 ] 

Brahma Reddy Battula commented on HADOOP-14799:
-----------------------------------------------

This needs to be cherry-picked to branch-2 and branch-2.8 as there is [CVE|https://nvd.nist.gov/vuln/detail/CVE-2017-12973#vulnDescriptionTitle] present.

> Update nimbus-jose-jwt to 4.41.1
> --------------------------------
>
>                 Key: HADOOP-14799
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14799
>             Project: Hadoop Common
>          Issue Type: Sub-task
>            Reporter: Ray Chiang
>            Assignee: Ray Chiang
>            Priority: Major
>             Fix For: 3.0.0-beta1
>
>         Attachments: HADOOP-14799.001.patch, HADOOP-14799.002.patch, HADOOP-14799.003.patch
>
>
> Update the dependency
>     com.nimbusds:nimbus-jose-jwt:3.9
> to the latest (4.41.1)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org